Android PowerVR SGX Driver CVE-2011-1350 Information Disclosure Vulnerability
BID:57900
Info
Android PowerVR SGX Driver CVE-2011-1350 Information Disclosure Vulnerability
| Bugtraq ID: | 57900 |
| Class: | Design Error |
| CVE: |
CVE-2011-1350 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 03 2011 12:00AM |
| Updated: | Nov 03 2011 12:00AM |
| Credit: | Geremy Condra |
| Vulnerable: |
Google Android 2.3.5 Google Android 2.2.3 Google Android 2.3.4 Google Android 2.3.3 Google Android 2.3.2 Google Android 2.3.1 Google Android 2.2.2 Google Android 2.2.1 Google Android 2.2 Google Android 2.1 Google Android 1.6 Google Android 1.5 |
| Not Vulnerable: |
Google Android 2.3.6 |
Discussion
Android PowerVR SGX Driver CVE-2011-1350 Information Disclosure Vulnerability
The PowerVR SGX driver in Android is prone to an information-disclosure vulnerability.
Successful exploits allows an attacker to gain access to sensitive information. Information obtained may aid in further attacks.
Android 2.3.5 and prior versions are vulnerable.
The PowerVR SGX driver in Android is prone to an information-disclosure vulnerability.
Successful exploits allows an attacker to gain access to sensitive information. Information obtained may aid in further attacks.
Android 2.3.5 and prior versions are vulnerable.
Exploit / POC
Android PowerVR SGX Driver CVE-2011-1350 Information Disclosure Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious Android application.
The following exploit code is available:
An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious Android application.
The following exploit code is available: